SSCP · Question #1297
What security control provides a method to insure that a transaction did or did not occur?
The correct answer is C. Nonrepudiation. Nonrepudiation is a security control that provides undeniable proof that a specific transaction or action occurred, preventing any party from falsely denying their involvement.
Question
What security control provides a method to insure that a transaction did or did not occur?
Options
- AIdentification
- BAccountability
- CNonrepudiation
- DVerification
- EAccess control
How the community answered
(15 responses)- B7% (1)
- C93% (14)
Why each option
Nonrepudiation is a security control that provides undeniable proof that a specific transaction or action occurred, preventing any party from falsely denying their involvement.
Identification is the process of asserting an identity, not proving a transaction's occurrence.
Accountability ensures that actions can be traced to an individual, but nonrepudiation specifically prevents the denial of those actions.
Nonrepudiation provides irrefutable proof that a specific action or transaction occurred, preventing a sender from falsely denying they sent a message or a receiver from falsely denying they received it. This is typically achieved through digital signatures or cryptographic hashing combined with trusted timestamps, linking an identity to a specific action, thereby guaranteeing the authenticity and origin of data.
Verification is the process of confirming the truth or accuracy of something, which is a broader concept than preventing repudiation.
Access control restricts who can perform actions on a resource, but it doesn't intrinsically prevent denial of performed actions.
Concept tested: Nonrepudiation principle in security
Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/non-repudiation
Topics
Community Discussion
No community discussion yet for this question.